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MICRO-CONTROLLER PROTECTED AGAINST CURRENT ATTACKS 

The invention concerns micro-controllers intended to be 
incorporated in portable objects and, in particular, in objects in card 
format more commonly called smartcords. 

The smartcards are generally used in applications where secure 
5 storage and processing of confidential data is essential. In particular, 
they arc intended for applications in the field of health, pay television 
applications, or banking applications, e.g. the electronic purse. 

Microcontrollers are programmed automatons produced in 
integrated circuit formnt. They apply a series of lo^ic instructions to the 
10 data from their internal memories or from the outside world, via an 
input/ output contact stud. 

Generally, the smartcard microcontrollers are designed using SMC 
technology. Usintf this technology, the subassemblies required for the 
operation of the microcontroller can be integrated in the same circuit, 
1G i.e. in particular a central processing unit (CPU), non volatile non 
rewritable read only memories of type ROM (Read Only Memory), non 
volatile rewritable memories of type Flash, EEPROM (Electrically 
Erasable Programmable Read Only Memory) or FRAM (Ferromagnetic 
Random Access Memory) and RAM (Random Access Memory) volatile 
20 memories. 

Defraudcrs have developed "current" attacks in order to obtain 
confidential data managed by the microcontroller and for example keys 
intended for the implementation of encryption algorithms used in the 
microcontrollers such as the DES (Data Encryption Standard) or RSA 
25 (Rivcst Shamir Adelman) algorithms. 

These attacks arc based on the principle according to which the 
energy £c M c consumed by a microcontroller executing in a time interval 



.i. vs D y± j & is .1 iW ,r 13 1 c* 

2 

T an instruction INS Applied to operands OPE is always the same and 
represents a signature. In other words: 

Ec„c (T ; INS ; OPE) • constant. 
Note thai, in the above relation, as well as in the relations which 
5 follow in this description, the sign means "nearly equal". 

To implement the current attacks, the defrauders connect in 
particular a resistor R of low value, in particular I O, in scries between 
the microcontroller power supply source V M c and its power supply stud 
VCC. They then display the variations of the voltage R Icc(t) according to 
10 the time obtained in response to the execution of several hundred or 
even several thousand instructions applied to identical similar or 
different operands, using a computer connected, for example, to a 
digital oscilloscope which amplify these variations, sample them and 
digitulise the results obtained for analysis in defcixed time. 
1 5 Such attacks, which are non destructive, are extremely dangerous. 

The manufacturers of microcontrollers and the manufacturers of 
boards have therefore developed methods to secure the microcontrollers 
against these attacks. 

Most of these methods rely on the use of programs which involve 
20 triggering operations at pseudo-random times or which involve 
operations generating 
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noise with considerable random or incorrect information while the 
instructions arc being executed by the microcontroller. 

However, these methods have numerous disadvantages. The 
program execution time is long. Considerable memory space is required. 
5 Lastly, the confidential data is not protected against an in-depth 
analysis carried out by the defrauders sine** the electrical signal, which 
resulLs fxoui the execution of the instructions, is still present. 

Another method, described in the French patent application No. 98 
01305, and not made public on the priority date of this request, 
10 suggests filtering the current with a low-pass filter cell, This melhod 
simply attenuates the electrical signatures and by analysing them in 
detail, certain confidential data can still be accessed. 

In' view of the above, a technical problem which the invention 
proposes to solve is to secure a microconlrollex which will be 
15 incorporated in a portable object of type sznartcard, including at least: 

- a contact stud to supply the said microcontroller with current; 

- a data input and/or output contact stud; 

- on efficient data processing; part; and 

- confidential data, 
20 against current attacks. 

The solution to this problem of the invention concerns such a 
microcontroller, characterised in that it also includes: 

- means to vary the supply voltage of the efficient data processing 
part, the said means being able to secure the said confidential data 

25 against current attacks. 



J.. I J U .3 3L & a JL G / D JL I* e' 

4 

Given that the energy consumption of the said efficient data 
processing part may be considered as being directly proportional to the 
square of its supply voltage, a variation of this voltage disturbs the 
5 electrical signatures and makes its difficult, or even impossible, to 
analyse them. 

Preferably, the means used to vary the supply voltage of the 
efficient data processing part include: - a time variable rcoiotor 
connected in series with the microcontroller supply contact stud, this 
1 0 variable resistor being for example a switch open during time intervals 
T 0 tr and closed during time intervals Ton* the cyclic ratio T o ff/(T 0n + ^ott) 
varying according tu time, the period T on + T 0 ff varying according to time. 

Moreover, the means used to vary the supply voltage of the 
efficient data, processing part preferably include a pulse generator, this 
15 pulse generator including a voltage threshold crossing synchronisation 
circuit across the terminals of the efficient data processing part. 

Lastly, the means used to vary the supply voltage of the efficient 
data processing part also preferably include a capacitor, this capacitor 
being for example one whose capacitance is greater than 0.1 nanofarad. 
20 In certain advantageous modes of realisation of the invention, the 

microcontroller includes a main layer of silicon whose active lace, which 
includes a circuit and supports the contact studs, is sealed to an 
additional protective layer via a sealing layer, the means to vary the 
supply voltage or thf*. efficient data processing part being located in the 
25 additional protective layer. 

It will be easier to understand the invention on reading the non 
limiting description below, written with reference to the accompanying 
drawings, where: 

- figure 1 shows, in perspective, a smartcard according to the 
30 invention; 



.1 O Q 'A x s u x . a ? D Jl O 22 



- figure 2 shows, in cross-section, a smartcard according to the 
invention; 

- figure 3 shows, in front view, the contact pads of a smartcard 
according to the invention; 

5 - figure 4 shows, in perspective, a microcontroller according to 

the invention; 

figure 5 schematises the various component parts of a 
microcontroller according to the invention; 

- figure 6A represents the active layer of the microcontroller 
10 according to the invention shown on figure 4; 

- figure nB represents the additional layer of the microcontroller 
according to the invention shown on figure 4; 

- figure 7 schematises an SMC inverter of an efficient data 
processing part of a microcontroller according to the invention; 

1 5 - figure 8 shows the variations of the command signal V,., of the 

supply current irr and of the output signal V„ of the SMC 
inverter of figure 7 against time; 

- figure 9 is a wiring diagram of a microcontroller according to the 
invention; 

20 - figures 10A to 10D show, respectively, the variations of signal S, 

of the current Icajs of the voltage V m cr and of the supply current 
lec of a microcontroller according to the invention against time; 

- figure 1 1 is a comparative recording of the variations in current 
Ice against time for a 

25 
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- microcontroller in the state of the art technology (signature A) 
then for a microcontroller secured according to the invention 
(signature B); 

- figure 12 is a wiring diagram of a special mode of realisation of a 
5 microcontroller according to the invention; and 

- figure 13 shows the variations of signals Si, S? and S? against 
time, for a microcontroller corresponding to the mode of 
realisation of figure 12. 

The portable objects according to the invention are standardised 
10 objects defined in particular in the various section of standard IS07816 

whose content is incorporated in this description by giving the 

reference. In the mode of realisation shown on figures 1 , 2 and 3, such 

an object takes the form of a roughly rectangular thin card 1 including 

a body 2 integrated to an electronic module 3. 
15 The body 2 of the card consists, for example, of five plnsric 

laminated sheets 20, 21, 22, 23 and 24 and includes a cavity 25 to 

incorporate the module 3, 

Module 3 includes a microcontroller 30 whose contact studs 300 

arc electrically connected, via conducting wires 31, to contact pads 32 
20 (lush with the surface of the card body 2. These contact pads 32 rest on 

a lliickncsR 33 of an epoxy glass type dielectric. The aoaembly 

microcontroller 30 and conducting wires 31 is coated with a protective 

resin 34. 

In the mode of realisation shown on figure 4, the microcontroller 
25 30 takes the form of a right parallelepiped of thickness about 180 urn 
and area about 10 mm A 

Thin microcontroller 30 includes a main layer 301 of silicon whose 
active face, which includes a circuit and supports the contact studs 
300, 

30 
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- microcontroller in the state of the art technology (sjjemature A) 
then for a microcontroller secured according to the invention 
(signature B); 

- figure 12 is a wiring diagram of a special mode of realisation of a 
S microcontroller according to the invention; and 

- figure 13 shows the variations of signals Si, S2 and S3 against 
time, for a microcontroller corresponding to the mode of 
realisation of figure 12. 

The portable objects according to the invention are standardised 
10 objects defined in pnrticular in the various section of standard IS07816 

whose content is incorporated in this description by giving the 

reference. In the mode of realisation shown on figures 1 , 2 and 3, such 

an object takes the form of a roughly rectangular thin card 1 including 

a body 2 integrated to an electronic module 3. 
15 The body 2 of the card consists, for example, of five plastic 

laminated sheets 20, 21, 22, 23 and 24 and includes a cavity 25 to 

incorporate the module 3. 

Module 3 includes a microcontroller 30 whose contact studs 300 

are electrically connected, via conducting wires 31, to contact pads 32 
20 flush with the surface of the card body 2. These contact pads 32 rest on 

a thickness 33 of an cpoxy glass type dielectric. The aoaembly 

microcontroller 30 and conducting wires 31 is coated with a protective 

resin 34. 

In the mode of realisation shown on figure 4, the microcontroller 
25 30 takes the form of a right parallelepiped or thickness about 180 pm 
and area about 10 mm*-*. 

This microcontroller 30 includes a main layer 301 of silicon whose 
active lace, which includes a circuit and supports the contact studs 
300, 

30 
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is scaled to an additional protective layer 302 of silicon using a 
scaling layer 303. This additional layer 302 has openings 304 located 
opposite the contact studs 300 so that they can be connected to the 
contact pads 32. 

5 In practice, there are five contact studs 300. They arc the studs 

VCC, RST, CLK, I/O and GND respectively connected to the contact 
pads VCC, RST, CL1C, I/O and GND of module 3. The supply contact 
stud VCC is intended to power the microcontroller. The reset stud RST 
is intended to transmit a reset signal to the microcontroller, the clock 

10 stud CLK ir, intended to transmit a clock signal to the microcontroller, 
the input/output stud I/O is intended to enable the exchange of logical 
data between the microcontroller and the outside world, and the ground 
stud GND is used to connect the microcontroller to ground. 

The integrated circuit of the microcontroller 30 according to the 

15 invention includes several active parts. In particular, there is an 
interface microcontroller part uCI arid an efficient data processing part 
uCE shown on figure 5. 

The interface microcontroller part or interface microcontroller uCI 
preferably only includes means which consume energy that is not likely 

20 to reveal information concerning the confidential data processed by the 
microcontroller. In practice, the interface microcontroller uCI includes 
for example a loading pump or interface circuits associated with the 
contact studs RST, CLK and I/O. The contact stud RST mainly 
concerns the means to detect an initialisation signal and associated 

25 means to initialise the microcontroller. The contact stud CLK concerns 
the means to detect frequencies between an upper limit and a lower 
limit. Lastly, the contact stud I/O concerns the means enabling the 
microcontroller to communicate by switching from an input mode to an 
output mode or vice versa. 
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The efficient data processing part or efficient microcontroller pCE is 
part of the microcontroller 30 which includes subassemblies whose 
inverters are intended for the processing of the confidential data. 
Consequently, it represents the part or the microcontroller likely to 
5 provide the defrauders with information on this confidential data. In 
practice, it includes the central processing unit (CPU), possibly a 
cryptoprocessor associated with this unit, data and address bus 
command circuits as well as the RAM, ROM and EEPROM memories or 
all memories of another type. 

10 The microcontroller 30 according to the invention also includes a 

pulse generator GEN, a capacitor CAP and a switch COM. The pulse 
generator, the capacitor and the switch are the means used to vary the 
supply voltage of the efficient microcontroller. 

The pulse generator GEN consists, for example, of two oscillators 

15 each composed of a Schmitt type inverter with hysteresis on the input 
circuit, a capacitor connected between the inverter input and the 
ground, and a resistor connected between the output of this inverter 
and its input, the said two oscillators being coupled together by a 
resistor to form a modulated frequency signal source. In addition, the 

20 pulse generator GEN preferably includes u voltage crossing 
synchronisation circuit for the threshold voltage Vthreshoid of the voltage 
VjjCE across the terminals of the efficient microcontroller. This circuit 
may consist of a voltage comparator whose positive input is connected 
to a reference voltage, the voltage Vthrcahow, whose negative input is 

25 connected to the voltage across the terminals ol the efficient 
microcontroller, and whose output is connected to the input D of a flip- 
flop synchronised by the synchronise lion signal from the modulated 
frequency signal source. 

The capacitor CAP has a capacitance greater than approximately 

30 0.1 nanofarad, especially between approximately 1 nanofaxad and 
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approximately 10 nanofamds, for example of the order of 0 nanofarads. 
Note that the electrodes of a 1.5 nanofarad capacitor have an area of 
approximately 1 mm 2 . Also, a 6 nanofarad capacitor has an area of 
approximately 4 mm' 2 . 
5 In the invention the switch COM can be replaced by a time variable 

resistor connected in scries with the microcontroller power supply 
contncL stud VCC. 

In the invention, the contact studs I/O, RST and CLK arc 
connected by electrical connection lines to the interface microcontroller 

10 mCI. The contact stud OND is connected by electrical connection lines to 
the pulse generator GEN, to the capacitor CAP, to thr. efficient 
microcontroller uCE and to the interface microcontroller uCI. In 
addition, the contact stud VCC is connected by electrical connection 
lines to the pulse generator GEN, to the switch COM and to the 

15 interface microcontroller uCI. In addition, the switch COM is connected 
by electrical, connection lines to the pulse generator GEN and to the 
capacitor CAP. lastly, an electrical connection line connects the 
efficient microcontroller nCE to the electrical connection line connecting 
the capacitor CAP to the switch COM and an electrical connection line 

20 connects the generator GEN to this last line so as to monitor the voltage 
V m ck ro compare it with the voltage Vmi™hoW- 

Por a microcontroller of the type shown in figure' 4, the above- 
mentioned parts are arranged as shown on figures 6A and 6B where the 
additional layer 302 (figure 6B) includes the pulse generator GEN, the 

25 capacitor CAP and the switch COM, and the main layer 301 (figure 6A), 
which supports the contact studs, includes the efficient microcontroller 
parts pCE and interface microcontroller gCT. 

In addition, the main layer 301 includes three interconnection 
studs PI, P2 and P3, a first stud PI connected to the stud VCC, a 
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second stud P2 connected to the efficient microcontroller and a third 
stud P3 connected to the stud GND. 

Similarly, the additional layer 302 includes three interconnection 
studs Pl\ P2* and P3* which will be fitted, in the microcontroller, 
5 opposite and vertically above the studs PI, P2 and P3. respectively. The 
first stud PI' is connected firstly to the switch COM and secondly to the 
pulse Generator GEN, the second stud P2' is connected to the common 
point between the switch COM and the capacitor CAP, and the third 
stud P3* is connected firstly to the capacitor CAP and secondly to the 

10 . pulse generator GEN. 

In the microcontroller 30 shown on figure 4, the studs PI, P2 and 
P3 are connected electrically to studs Pl\ P2' and P3 1 respectively via 
conducting bosses. 

Obviously, the microcontroller described above only represents one 

15 mode of realisation according to the invention and it is quite possible to 
design other modes of realisation of microcontrollers which do not have 
a multi-layer structure but a more traditional structure where the 
various above-mentioned parts: contact studs, interface and efficient 
microcontrollers, capacitor, pulse generator and switch, arc integrated 

20 in a single layer of silicon substrate not covered with an additional 
layer. 

The energy Ec, lC consumed by a microcontroller according to the 
invention is equal to, the sum of the energies Ec M cr. Ec^ce and Ec M 
consumed respectively by the interface microcontroller, the efficient 
25 microcontroller find the pulse generator/ capacitor/ switch assembly. Wc 
therefore obtain the relation: 

Ecpc = Ecj»ci + EcpiCK + 
The energy Ec^ci consumed by the interface microcontroller does 
not reveal the instructions executed by the microcontroller 30 and 
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hence does not reveal the confidential data processed during the 
execution of the said instructions. 

The elementary gates of the efficient microcontroller are inverters 
40 as shown on figure 7. These inverters 40 consist of a P type transistor 
5 401 connected in series with an N type transistor 402, A voltage V^cc is 
applied to the P type transistor and the N type transistor is connected to 
the ground GND. A capacitor Q is associated with each inverter 40. The 
capacitance of this capacitor Ci is equivalent to the physical 
capacitances of the inverter interconnection lines and to the 

10 capacitances of the grids forming the P and N type transistors of the 
inverter possibly connected below the inverter shown on figure 7. 

From a functional point of view, the P and N type transistors are 
conUolled by a common command signal V c corresponding to the input 
voltage of the inverter. When this signal carries a logical 0 (V c - GND), 

15 the P type transistor is on and the N type transistor is olf so that a 
logical 1 is obtained in outpxit (V fi - V mC e) and the capacitor Q charges 
up. However, when this signal carries a logical 1 (VV ~ V MC >;) f the P type 
transistor is off and the N type transistor is on so that a logical 0 is 
obtained in output (V„ = GND) and the capacitor C. discharges. 

20 Figure 8 shows the variations of the command signal V tf , of the 

supply current ice and of the output signal V* against time t, when the 
working frequency of the inverter is equal to F M cc, which is generally the 
clock frequency imposed by the terminal via the contact stud CLK, but 
which may be a special frequency, if the microcontroller can generate 

25 an internal clock signal. 

When the voltage W is constant, the P and N type transistors are 
off and the inverter 40 is crossed by a leakage current not shown on 
figure 8 whose average value is If over a period 1/F m cf.. The energy 
dissipated, or static energy E„ is then equal to: 

3U E* = V„ce If/FpCR. 
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When the voltage V* varies so that the signal at the inverter input 
changes from logical 1 to logical 0 or vice versa, the current varies as 
shown on figure 8. 

The inverter consumes a short circuit energy Ecc, equal to: 
5 Ecc° VVck Isc/FiiCE 

where Isc is tlie average value of the short circuit current over the 
period l/F M ce- 

Moreover, when the voltage V e varies so that the signal at the 
inverter input changes from logical 1 to logical 0, the capacitor Ci 
10 charges up until it reaches a voltage of V uC c and the dynamic energy Ea 
then consumed equals the sum of the energy stored in the capacitor Ci 
as electrostatic energy and the energy dissipated in the limiting 
equivalent resistance of the charging current, in this case the P type 
transistor, i.e.! 

15 EX, - 1/2 Cj VVe + 1/2 Ci V3 m ce = Ci VVf.. 

Lastly, when the voltage VV varies so that the signal at the inverter 
Input changes from logical 0 to logical 1, the capacitor C\ discharges 
across the N type transistor, dissipating the energy previously stored 
and equal to 1/2 C, VV*. 

20 For an inverter produced using SMC technology, E cx - is less than 20 

% of Eu and E, is much lc33 than Ed. Consequently, the energy E r 
consumed by the inverter i is mainly dynamic and we consider that E L 
is roughly equal to Ed. 

Consequently, the energy consumed by the efficient microcontroller 

25 on one clock transition is, when the said efficient microcontroller is 
supplied by n voltage V„ce, roughly equal to: 

ECpcr. - "J Cl V 2 P cn: 

where u.i - 1 when the inverter i consumes energy by in particular 
making a switching operation during this transition and cti = 0 when 

30 the inverter i docs not consume energy by in particular not making a 
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switching operation during this transition and where N is the number of 
inverters in the efficient microcontroller. 

The energy consumed by the efficient microcontroller therefore 
varies according to the square of its supply voltage V p cf.- 
5 The energy Ec w consumed by the means of the invention is equal 

to the energy Eccen consumed by the pulse generator GEN plus the 
energy Eccom consumed by the switch COM and the energy Eccap 
consumed hy the capacitor CAP. Thus: 

Ec M - Eccen + ffccoM + Kccap 
10 The energy Ecqkh consumed by the pulse generator GEN is of the 

same type as the energy consumed by the interface microcontroller. It 
gives, in fact, no indication concerning the confidential data processed 
when executing the instructions. 

The energy Eccom consumed by the switch COM is in fact the 
15 energy dissipated by this switch when the capacitor CAP charges up. 
Thus: 

Eccom = Eccap while it is charging. 
The energy Eccaf consumed by the capacitor CAP depends on the 
state, open or closed, of the switch COM. The open or closed state of the 
20 switch COM is controlled by the pulse generator GEN. This generator 
can in fact send a command signal S to open or close the switch COM. 
Depending on the signal S received, this switch is closed or open. It is 
closed during time intervals Ton. It is open during time intervals Toff 9 
During the time interval T 0 fr the capacitor discharges and the 
25 energy it consumes is equal to EccAr(Toff) such that: 

EccAp(Tofr) - - 1/2CAV2 
where AV represents the voltage variation across the terminals of the 
enpnritor during T Q ff. 

During the time interval T 0 n, the capacitor supplied by the current 
30 lec charges up, and its energy consumed Eccap (T on ) is equal to: 
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EccApfTon) - 1/2 C AV* 
where AV represents the voltage variation across the terminals of the 
capacitor during T on . 

A defrauder only has access to the total microcontroller supply 
5 current and hence to the total energy consumed by the microcontroller. 

During the time interval T 0 cr, the energy consumed by the 
microcontroller is equal to the energy consumed by the interface 
microcontroller. The efficient microcontroller is in fact supplied by the 
capacitor CAP which is discharging. Thus, in Toir: 
10 ECpc^Ec^ci. 

As we have seen cnrlier, Ec^o does not reveal any information 
concerning the switching of the efficient microcontroller inverters and 
hence no information concerning the confidential data processed. 
Consequently, with the invention, the defrauder cannot access the said 
1 5 data during the time intervals To<r. 

However, during the time interval T 0 *, the energy consumed by the 
microcontroller is equal to the energy consumed by the interface 
microcontroller, plus the energy consumed by the means according to 
the invention and plus the energy consumed by the efficient 
20 microcontroller. Thus: 

Ec M c ° Ecpci + Ec m cb + Ec M . 
Given an instruction INS applied to the same operands OPE and 
executed by the microcontroller according to the invention. In practice, 
tills instruction INS is executed on several clock transitions. On each 
25 clock transition, part of the inatruction TNS is executed and some of the 
N inverters of the efficient microcontroller change state for this purpose. 

The energy consumed by the efficient microcontroller during such 
a transition is directly proportional to the square of the voltage V m cd 
across the terminals of the said microcontroller. 
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Since the capacitor CAP is connected in parallel with the efficient 
microcontroller, the voltage V„ck across the terminals of the efficient 
microcontroller is the s/imc as the voltage Vcah acro^n the terminals of 
the capacitor CAP. The voltage across the terminals of the efficient 
5 microcontroller therefore varies constantly. 

Consequently, the energy consumed to execute part of the 
instruction INS and, all the more so, for a complete instructions INS, is 
uot always the same 

In fact, willi identical instructions applied to the same operands, 
10 the difference between the energies consumed by the efficient 
microcontroller is even greater since they are related to the square of 
the supply voltage V M crc of this microcontroller. 

As a result of the above, the principle mentioned in the preamble of 
this description according to which Ec p c (T; INS; OPE) = constant is no 
15 longer true in the invention and the defrauder is therefore unable to 
access the confidential information. 

Figures 10A to 10D show respectively the signal S, the supply 
current Icap of the capacitor CAP, the supply voltage V mUK of the efficient 
microcontroller and the supply current Ice of the microcontroller 
20 against time t. 

As shown on figure 10A, the time intervals T of f and T 0 r\ vary from 
one period T\ - T of T + T on to nnother. The cyclic ratio T 0 fr/(Tnn + T 0 rr) 
therefore varies with time and also randomly, which is an advantage, 
hence making it unpredictable for the defrauder. Moreover, since the 
25 switch COM is not closed at the exact moment when the voltage across 
the terminals of the capacitor reaches the threshold value V^-uu but on 
the first clock tick following thi3 moment, nnd since the time interval 
between the said moment and this first clock tick is variable, the value 
of T 3 = vanes randomly. In addition to the variations of T 3 

30 described above, there axe the variations of T ft due to the way that the 
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pulse generator is made, including two coupled oscillator* with Schmitt 
type inverter. 

Also, as shown on figure 10B, the supply current Icat of the 
capnrJtnr CAP is positive during the time intervals T«, during which the 
5 capacitor charges up. However, Icap decreases during these intervals 
until lcAr(t) - 0. Consequently, the capacitor has its maximum charge 
when the switch opens. Furthermore, the current Icap is negative during 
the time intervals T 0 ir during which the capacitor discharges to supply 
the efficient microcontroller. 

10 As shown on figure IOC, the supply voltage V pCK of the efficient 

microcontroller increases during the time intervals T Q n and decreases 
during the time intervals T©ir. AV represents the depth of the voltage 
modulation across the capacitor terminals. 

Lastly, aa shown on figure 10D, the supply current Ice of the 

15 microcontroller is equal to I M ci during Tofr then increases during Tan. 
where it is equal to I M ci + Icap + Imce- 

Figure 11 shows the variations of current ice against t, for a 
microcontroller in the state of the art technology (signature A), and also 
for the same microcontroller according to the invention (signature B) for 

20 the execution of identical instructions applied to the same operands. 
Although these instructions arc executed in the same way in time, the 
curves arc totally different. The current peaks seen on the first curve do 
not appear on the second curve. The time intervals T Q ir and T on are 
clearly seen on the second curve. It is therefore extremely difficult to 

25 determine any details concerning the confidential data from the second 
curve. 

Obviously, the description of the mode of realisation of the 
invention described above does not limit the invention which must be 
understood in the broad sense. Other more complicated modes of 
30 realisation could provide extremely interesting results. This refers lor 
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example to the mode of realisation described in figure 12 showing n 
microcontroller equipped with two capacitors CAP1 and CAP2, three 
switches COM1, COM2 and COM3 and three command signals SI, S2 
and S3 to open and close the three switches C0M1, COM2 and COM3, 
5 respectively. In this mode of realisation, the capacitor CAP1 is 
discharged at a reference voltage, for example GND, through the switch 
COM3 while switches COM1 and COM2 are open, before being 
recharged through switch COM1 while switches COM2 and COM3 arc 
open. The capacitor CAP1, once charged through switch COM1, 

10 discharges into capacitor CAP2 in parallel with the efficient 
microcontroller jjCE through switch COM2 while switches COM1 and 
COM2 are open. Figure 13 showed the variations of the signals Si, S2 
and S3 against time. The mode of realisation provides a means of 
keeping the energy consumption constant irrespective of the activity of 

15 the uCE. Confidential information can no longer be obtained by 
analysing the current Ice. This mode of realisation increases the energy 
consumption of the efficient microcontroller. 



